We (by we, I mean myself and christer) recently demonstrated a score of local (and indeed a remote) kernel vulnerabilities at CanSecWest 2009, so far a total of 6 exploits have been posted to this site, the remainder will come soon!